what should be configured on a workstation?

In order to block certain websites and ports, what should be configured on a workstation?

A.
Host-based firewall

B.
Port scanner

C.
Antivirus service

D.
Network-based firewall